Priority LOW 38
A SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00438 · Published 2024-05-28 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-28 · No fix listed CWE-89
Priority MEDIUM 58
A SQL injection vulnerability in /model/get_teacher_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00286 · Published 2024-05-28 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-28 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-28 · No fix listed CWE-89
Priority LOW 30
A SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00297 · Published 2024-05-28 · No fix listed CWE-89
Priority LOW 24
A SQL injection vulnerability in /model/get_exam.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00286 · Published 2024-05-28 · No fix listed CWE-89
Priority MEDIUM 62
A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00426 · Published 2024-05-28 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-28 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-28 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-28 · No fix listed CWE-89
Priority HIGH 78
A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the month parameter.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00377 · Published 2024-05-23 · No fix listed CWE-89
Priority MEDIUM 49
A SQL injection vulnerability in /view/conversation_history_admin.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversation_id parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-23 · No fix listed CWE-89
Priority MEDIUM 49
A SQL injection vulnerability in /view/emarks_range_grade_update_form.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversation_id paramete…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-23 · No fix listed CWE-89
Priority LOW 30
A SQL injection vulnerability in /model/update_grade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the admission_fee parameter.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00297 · Published 2024-05-23 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/update_exam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-23 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-23 · No fix listed CWE-89
Priority LOW 25
A SQL injection vulnerability in /model/all_events1.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the month parameter.
CVSS 3.1MEDIUM 5.3· Local · Low privileges · No interaction · EPSS 0.00221 · Published 2024-05-23 · No fix listed CWE-89
Priority MEDIUM 49
A SQL injection vulnerability in /view/find_friends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the my_index parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-23 · No fix listed CWE-89
Priority HIGH 65
A SQL injection vulnerability in /model/update_subject_routing.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.00317 · Published 2024-05-23 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/update_classroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-23 · No fix listed CWE-89
Priority LOW 24
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00407 · Published 2024-05-23 · No fix listed CWE-89
Priority LOW 24
A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00407 · Published 2024-05-23 · No fix listed CWE-89
Priority LOW 24
A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00407 · Published 2024-05-23 · No fix listed CWE-89
Priority LOW 24
A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00407 · Published 2024-05-23 · No fix listed CWE-89
Load more